Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7 CVE-2025-53190

Unauthenticated Time Manipulation_CVE-2025-53190

A vulnerability in ABB Aspect.This issue affects Aspect: before

ABB Aspect CVE
HIGH 7.7 CVE-2025-53191

Unauthenticated Network Manipulation_CVE-2025-53191

Missing Authentication for Critical Function vulnerability in ABB Aspect.This issue affects Aspect: before

ABB Aspect CVE
HIGH 7.2 CVE-2025-54478

Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin_CVE-2025-54478

Mattermost Confluence Plugin version

Mattermost Mattermost Confluence Plugin CVE
HIGH 7.4 CVE-2025-7679

Session ID Basic Auth Bypass_CVE-2025-7679

Missing Authentication for Critical Function vulnerability in ABB Aspect.This issue affects Aspect: All versions.

ABB Aspect All versions CVE
HIGH 7.5 CVE-2025-54525

Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin_CVE-2025-54525

Mattermost Confluence Plugin version

Mattermost Mattermost Confluence Plugin CVE
HIGH 10 EDB-ID:52407

Belkin F9K1009 F9K1010 2.00.04/2.00.09 – Hard Coded Credentials_EDB-ID:52407

/ * Title : Belkin F9K1009 F9K1010 2.00.04/2.00.09 - Hard Coded Credentials * Author : Byte Reaper * CVE : CVE-2025-873...

N/A N/A EXPLOITDB
HIGH 7.5 EDB-ID:52408

Ghost CMS 5.42.1 – Path Traversal_EDB-ID:52408

!/usr/bin/env python3 --...

N/A N/A EXPLOITDB
HIGH 7.5 CVE-2025-25231

CVE-2025-25231_CVE-2025-25231

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive info...

Omnissa Omnissa Workspace ONE UEM Omnissa Workspace ONE UEM version 24.10.0.10 or earlier CVE
HIGH 7 CVE-2025-53187

Unauthenticated RCE_CVE-2025-53187

Improper Control of Generation of Code ('Code Injection') vulnerability in ABB ASPECT.This issue affects ASPECT: before

ABB ASPECT CVE
HIGH 8 CVE-2025-54063

Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling_CVE-2025-54063

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one-click remote code executio...

CherryHQ cherry-studio >= 1.4.8, < 1.5.1 CVE